dayz-p3d-audit
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized command executions were detected in the skill instructions or scripts.
- [EXTERNAL_DOWNLOADS]: The skill instructions and scripts refer to a local DayZ-specific fork of the
py3dlibrary (tools/py3d). The auditor explicitly warns users against installing the genericpy3dpackage from public registries, providing a safety-conscious installation path. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes external, untrusted data from
.p3d,config.cpp, and.rvmatfiles. However, the risk is minimal as the scripts perform static analysis and only print diagnostic findings to standard output. - Ingestion points:
scripts/audit_p3d.pyreads user-supplied model and configuration files. - Boundary markers: Standard instructional headers are used, but specific data delimiters for analyzed content are not present.
- Capability inventory: The script is limited to file system reads and printing results to the console.
- Sanitization: Content read from external files is parsed via regular expressions for specific technical patterns rather than being executed or directly interpolated into instructions.
Audit Metadata